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The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 



Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )[3 Responsive to communication(s) filed on 24 July 2006 . 
2a)E3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) 03 Claim(s) 33-58 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^3 Claim(s) 33-58 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (0. 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 5) D Notice of Informal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: . . 
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DETAILED ACTION 



Response to Arguments 

Applicant's arguments filed 7/24/2006 have been fully considered but they are not 
persuasive. Applicant argues that Stewart US 6,571,221 would n^convert encrypted data 
to unencrypted t u unciiciy plul because the conversion point would be prior to network 
130. The applicant asserts that this network is the internet. The examiner asserts that 
network 130 could also be a proprietary WAN, or LAN (Col 9 lines 4-9) which is not the 
public internet, and may be behind a protected firewall as is known in the art. 

Applicant's arguments, see filed 7/24/2006, with respect to the rejection(s) of claim(s) 
33-58 have been fully considered and are persuasive. Therefore, the rejection has been 
withdrawn. However, upon further consideration, a new ground(s) of rejection is made in 
view of Stewart US 6,571,221 in view of Strahm US 2002/0133598. 



Claim Rejections - 35 USC § 112 



The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

Claim 34 recites the limitation "within the data center" in line 2. There is insufficient 
antecedent basis for this limitation in the claim. 
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Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 33-36, 38, 40, 42, 43, 45, 48, 50, 51, 52, and 54-58 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Stewart US 6,571,221 in view of Strahm 
US 2002/0133598. 

As per claims 33, 42, 50, and 56 Stewart teaches an interface to receive data from at least 
one wired client device and one wireless client device, (Col 8 lines 47-55). Stewart 
teaches logic to determine if the device is wired or wireless, (Col 7 lines 43-62, Col 8 
lines 20-30). Stewart teaches requesting a secure connection from a wired or wireless 
device,(Col 13 lines 33-43). Stewart teaches that the client is authenticated in 
establishing a connection with the wired or wireless device, (Col 14 lines 29-44). 
Stewart does not teach SSL, WTLS or converting encrypted data to an unencrypted 
format. 
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Strahm teaches a security format conversion system including from wired SSL or 
wireless WTLS, [0024], [0026], [0034], [0045]. Strahm teaches converting the encrypted 
data to a different format (unencrypted), [0034]. Strahm teaches a network interface and 
a server to receive converted data, [0034]. 

It would have been obvious to one of ordinary skill in the art to use the protocols of 
Strahm with the system of Stewart because SSL and WTLS are widely accepted and 
compatible protocols. 

As per claim 34, Stewart teaches that the device has an interface to transmit data and to 
receive data from a server, (Col 14 lines 16-22). 

As per claims 38, 45, and 52, Stewart teaches requesting a digital certificate of the client 
and authenticating that certificate, (Col 14 lines 19-22, 29-33). 

As per claims 35, 36, 40, 43, 48, 51, 54, and 55 Stewart does not teach protocols or 
determining the client type dependent on protocol. 

Strahm teaches a security format conversion system including from wired SSL or 
wireless WTLS, [0024], [0026], [0034], [0045]. 

As per claims 57, and 58 Strahm teaches that all decryption takes place in the firewall, 
which is located between a public network and a data center server, [0033], Fig 1. 
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Claims 37, 41, 44, 46, and 49 are rejected under 35 ILS.C. 103(a) as being 
unpatentable over Stewart US 6,571,221 in view of Strahm US 2002/0133598 in view 
of Douglas US 2004/0010684 

As per claims 37 and 44, Stewart fails to teach sending a certificate from the server to the 
client. 

Douglas teaches a handshaking technique where the client and server exchange 
certifications and digital signatures to authenticate each other, [0031], [0032]. 
It would have been obvious to one of ordinary skill in the art to use the handshaking 
technique of Douglas with the system of Stewart-Strahm because it allows the client to 
authenticate the server thus ensuring that the client is not communicating with an 
unauthorized party. 

As per claims 41, and 49, Stewart-Strahm fails to teach receiving a digital signature from 
the client device and validating said signature. 

Douglas teaches a handshaking technique where the client and server exchange 
certifications and digital signatures to authenticate each other, [0029], [0030] [0031]. 
It would have been obvious to one of ordinary skill in the art to use the digital signatures 
of Douglas with the system of Stewart in order to confirm that data had not been 
manipulated in transit. 
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As per claim 46, Stewart -Strahm fails to teach verifying the validity period of the 
certificate. 

Douglas teaches including a timestamp in the signed message, and validating said 
message, [0028], [0029]. It would have been obvious to one of ordinary skill in the art to 
use the timestamp of Douglas with the certificate of Stewart because it would prevent 
replay attacks [Douglas 0028]. 

Claims 39, and 47 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Stewart US 6,571,221 in view of Strahm US 2002/0133598 in view of Hajmiragha US 
6,289,460 

As per claims 39, and 47, Stewart-Strahm does not teach using a URL with a digital 
certificate. 

Hajmiragha teaches sending a link, rather than the actual digital certificate, (Col 4 lines 
40-43). 

It would have been obvious to one of ordinary skill in the art to use the system of Stewart 
with the link of Hajmiragha, because the link prevents interception and modification of a 
digital certificate between parties. 

Claims 53 is rejected under 35 U.S.C, 103(a) as being unpatentable over Stewart US 
6,571,221 in view of Strahm US 2002/0133598 in view of Stubblebine US 6,216,231 
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As per claim 53, Stewart-Strahm does not teach updating a short lived server certificate 
based on a user defined interval. 

Stubblebine teaches updating a short lived server certificate based on a user defined 
interval, (Col 15 lines 25-36). 

It would have been obvious to one of ordinary skill in the art to use the updating 
certificates of Stubblebine with the Stewart-Strahm combination because short lived 
certificates increase security. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1. 136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Christopher J. Brown whose telephone number is 

(571)272-3833. The examiner can normally be reached on 8:30-6:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

supervisor, Jaques Louis Jaques can be reached on (571)272-6962. The fax phone 

number for the organization where this application or proceeding is assigned is 571-273- 

8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Christopher J. Brown 10/13/06 
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